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Stronger protection is needed for the confidentiality and integrity of data, 
because programs containing untrusted code are the rule rather than the 
exception. Information flow control allows the enforcement of end-to-end 
security policies, but has been ... 
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This paper presents secure program partitioning, a language-based technique for 
protecting confidential data during computation in distributed systems containing 
mutually untrusted hosts. Confidentiality and integrity policies can be expressed 
by annotating ... 
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Traditionally, security requirements have been derived in an ad hoc manner. 
Recently, commercial software development organizations have been looking for 
ways to produce effective security requirements. I n this paper, we show how to 
build security ... 
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Current developments in IT point towards the formation of loosely coupled 
enterprises, often referred to as virtual enterprises. These enterprises require 
both secure and flexible collaboration between unrelated information systems. 
Web services technology ... 
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Current software attacks often build on exploits that subvert machine-code 
execution. The enforcement of a basic safety property, Control-Flow Integrity 
(CFI), can prevent such attacks from arbitrarily controlling program behavior. CFI 
enforcement is ... 
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Interactive courseware encourages student participation and active learning. 
Prior research and teaching experience has shown that IT students prefer to 
learn information security in a hands-on manner. How do we offer information 
security as a distance ... 
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This paper studies issues related to privacy protection of medical data, arguing 
that the topic is suitable for applied cryptographic research. We present the 
problem of medicine prescription privacy and describe a practical system that 
employs standard ... 
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An effective method for detecting computer misuse is the automatic auditing and 
analysis of on-line user activity. This activity is reflected in the system audit 
record, by changes in the vulnerability posture of the system configuration, and 
in other ... 
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In order to run untrusted code in the same process as trusted code, there must 
be a mechanism to allow dangerous calls to determine if their caller is authorized 
to exercise the privilege of using the dangerous routine. Java systems have 
adopted a technique ... 
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